$ rpki-client -vvf repo-rpki.idnic.net/repo/51234c4a-a8ff-4036-8420-da8162111806/0/CB54DC526FA214F9F736926E6AAA16ABE39BF8E8.mft File: CB54DC526FA214F9F736926E6AAA16ABE39BF8E8.mft (raw, json) Hash identifier: 9EahGudrvpHIc3fQGpva0iAH7B5l9Kqe653CMqEglQw= Subject key identifier: E2:90:DE:AC:55:18:CB:20:B9:23:80:E1:26:A0:85:34:6D:B2:52:D4 Authority key identifier: CB:54:DC:52:6F:A2:14:F9:F7:36:92:6E:6A:AA:16:AB:E3:9B:F8:E8 Certificate issuer: /CN=CB54DC526FA214F9F736926E6AAA16ABE39BF8E8 Certificate serial: 357388BF3F66883B7E3E631D1D2A129BC273FB7A Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/CB54DC526FA214F9F736926E6AAA16ABE39BF8E8.cer Subject info access: rsync://repo-rpki.idnic.net/repo/51234c4a-a8ff-4036-8420-da8162111806/0/CB54DC526FA214F9F736926E6AAA16ABE39BF8E8.mft Manifest number: 010E Signing time: Tue 04 Nov 2025 01:50:40 +0000 Manifest this update: Tue 04 Nov 2025 01:45:40 +0000 Manifest next update: Fri 07 Nov 2025 06:17:40 +0000 Files and hashes: 1: 3135372e31352e36332e302f32342d3234203d3e20313532333733.roa (hash: O3gcBChIby3AdjPp6ABgzZyB6Dva+5HT0HMij4bC+80=) 2: 3135372e31352e36322e302f32332d3233203d3e20313532333733.roa (hash: jXxQ64IynNf9UaROvNwdTvfTlkwJClGyFCLy03gvgpE=) 3: CB54DC526FA214F9F736926E6AAA16ABE39BF8E8.crl (hash: JQ54J3JXF0D1ShgIA6WFrxgubpe/T6rno+eNO4GkUPQ=) 4: 3135372e31352e36322e302f32342d3234203d3e20313532333733.roa (hash: lS5KueYMn8bh5TmvZ4yUXAkTqzodamQRrumfFCdScxY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/51234c4a-a8ff-4036-8420-da8162111806/0/CB54DC526FA214F9F736926E6AAA16ABE39BF8E8.crl rsync://repo-rpki.idnic.net/repo/51234c4a-a8ff-4036-8420-da8162111806/0/CB54DC526FA214F9F736926E6AAA16ABE39BF8E8.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/CB54DC526FA214F9F736926E6AAA16ABE39BF8E8.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Nov 2025 06:17:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 35:73:88:bf:3f:66:88:3b:7e:3e:63:1d:1d:2a:12:9b:c2:73:fb:7a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CB54DC526FA214F9F736926E6AAA16ABE39BF8E8 Validity Not Before: Nov 4 01:45:40 2025 GMT Not After : Nov 7 06:17:40 2025 GMT Subject: CN=E290DEAC5518CB20B92380E126A085346DB252D4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:99:35:54:c7:09:dd:18:62:80:5f:cd:3d:a4: 50:c9:f3:26:2e:19:5e:fd:f9:d5:6b:ac:7e:92:6e: 0a:34:98:3f:bc:40:0d:1c:98:1f:2a:e5:95:c2:5a: bb:8b:a9:1e:ac:69:34:31:c6:dc:0d:43:f8:2c:5d: 3e:17:f2:c3:70:25:2e:c7:80:3d:0b:49:96:8b:9c: d5:92:f8:9c:1e:f7:b6:f8:e1:49:02:d9:f8:01:45: e0:dd:b3:38:71:de:50:1c:00:ac:5b:c5:a7:22:d5: f1:66:05:01:13:7c:11:46:2c:37:db:e9:36:d1:73: 4b:ba:5c:9a:0f:6b:4c:ea:86:c2:c9:75:1b:e4:5f: 5d:04:81:8d:14:aa:54:75:b8:4e:36:c4:09:60:1d: 2a:0d:a0:d3:c0:a5:7a:73:91:8f:a9:84:f5:12:00: 3f:c9:25:cb:ed:06:4e:98:12:98:3c:a6:1d:6c:cb: 71:9f:26:4f:27:39:52:8c:0e:86:d0:02:62:b9:15: 36:df:b8:bd:83:b1:f8:51:45:94:0d:d6:a5:3f:c3: 72:83:5f:ea:b4:fd:cc:e4:30:9a:d5:ef:4b:7b:af: 80:9a:66:23:3c:d7:f7:a8:ff:da:e6:0f:0d:f3:7b: a2:cb:31:c4:ef:17:f6:2b:14:41:f0:2b:90:e3:84: 5a:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:90:DE:AC:55:18:CB:20:B9:23:80:E1:26:A0:85:34:6D:B2:52:D4 X509v3 Authority Key Identifier: keyid:CB:54:DC:52:6F:A2:14:F9:F7:36:92:6E:6A:AA:16:AB:E3:9B:F8:E8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/51234c4a-a8ff-4036-8420-da8162111806/0/CB54DC526FA214F9F736926E6AAA16ABE39BF8E8.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/CB54DC526FA214F9F736926E6AAA16ABE39BF8E8.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/51234c4a-a8ff-4036-8420-da8162111806/0/CB54DC526FA214F9F736926E6AAA16ABE39BF8E8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 64:18:13:94:54:3e:03:ff:cf:f6:98:5f:92:d2:8b:23:a9:c2: b7:aa:58:82:f3:de:52:b1:51:26:90:30:53:51:7e:ae:ea:d3: 15:6f:ee:e6:dd:ce:46:9c:cf:38:fc:c6:ce:df:82:52:98:48: a2:57:d6:20:81:a3:be:57:7a:05:12:59:3f:e2:cf:49:b8:9b: 9c:f0:d8:4f:1c:2f:85:23:7e:22:47:5e:16:e8:87:5b:9d:ad: 2e:31:1e:2c:56:65:73:15:f4:88:50:45:41:37:12:ed:66:c6: eb:37:d0:b8:60:d7:04:fd:31:75:2d:2f:da:d6:46:e9:e2:ff: e6:5b:1f:79:8e:9d:6c:a6:b9:81:6c:7a:57:b7:d0:41:46:59: f8:a6:94:21:e2:2b:4c:2c:da:d0:a4:49:04:16:f1:81:0e:9a: ba:93:6e:92:cc:01:4f:af:78:61:48:54:eb:9f:48:84:dc:94: f5:27:68:da:87:e5:e7:d6:ce:7b:ac:07:d2:ed:0d:91:34:5f: cb:6a:32:15:af:05:a5:60:63:58:26:e5:78:3d:87:67:42:55: a1:a4:dd:14:42:c7:98:1b:10:19:8d:0b:2a:fb:f3:b6:42:2d: e7:b5:0a:7d:42:a8:5e:cf:57:5f:36:54:21:1d:73:81:04:17: be:9b:24:12 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUNXOIvz9miDt+PmMdHSoSm8Jz+3owDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0I1NERDNTI2RkEyMTRGOUY3MzY5MjZFNkFBQTE2QUJF MzlCRjhFODAeFw0yNTExMDQwMTQ1NDBaFw0yNTExMDcwNjE3NDBaMDMxMTAvBgNV BAMTKEUyOTBERUFDNTUxOENCMjBCOTIzODBFMTI2QTA4NTM0NkRCMjUyRDQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0mTVUxwndGGKAX809pFDJ8yYu GV79+dVrrH6Sbgo0mD+8QA0cmB8q5ZXCWruLqR6saTQxxtwNQ/gsXT4X8sNwJS7H gD0LSZaLnNWS+Jwe97b44UkC2fgBReDdszhx3lAcAKxbxaci1fFmBQETfBFGLDfb 6TbRc0u6XJoPa0zqhsLJdRvkX10EgY0UqlR1uE42xAlgHSoNoNPApXpzkY+phPUS AD/JJcvtBk6YEpg8ph1sy3GfJk8nOVKMDobQAmK5FTbfuL2DsfhRRZQN1qU/w3KD X+q0/czkMJrV70t7r4CaZiM81/eo/9rmDw3ze6LLMcTvF/YrFEHwK5DjhFqrAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU4pDerFUYyyC5I4DhJqCFNG2yUtQwHwYDVR0j BBgwFoAUy1TcUm+iFPn3NpJuaqoWq+Ob+OgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 MTIzNGM0YS1hOGZmLTQwMzYtODQyMC1kYTgxNjIxMTE4MDYvMC9DQjU0REM1MjZG QTIxNEY5RjczNjkyNkU2QUFBMTZBQkUzOUJGOEU4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvQ0I1NERDNTI2RkEyMTRGOUY3MzY5MjZFNkFBQTE2QUJFMzlC RjhFOC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNTEyMzRjNGEtYThmZi00MDM2LTg0 MjAtZGE4MTYyMTExODA2LzAvQ0I1NERDNTI2RkEyMTRGOUY3MzY5MjZFNkFBQTE2 QUJFMzlCRjhFOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGQYE5RUPgP/z/aYX5LSiyOpwreqWILz3lKx USaQMFNRfq7q0xVv7ubdzkaczzj8xs7fglKYSKJX1iCBo75XegUSWT/iz0m4m5zw 2E8cL4UjfiJHXhboh1udrS4xHixWZXMV9IhQRUE3Eu1mxus30Lhg1wT9MXUtL9rW Runi/+ZbH3mOnWymuYFsele30EFGWfimlCHiK0ws2tCkSQQW8YEOmrqTbpLMAU+v eGFIVOufSITclPUnaNqH5efWznusB9LtDZE0X8tqMhWvBaVgY1gm5Xg9h2dCVaGk 3RRCx5gbEBmNCyr787ZCLee1Cn1CqF7PV182VCEdc4EEF76bJBI= -----END CERTIFICATE-----Generated at Tue Nov 4 16:13:20 2025 by rpki-client